FALLS CHURCH, Va.   –   If you get care at a military hospital or clinic, the MHS GENESIS Patient Portal is your main tool for managing your care online. You can use it to send secure messages, check test results, review appointments, and more. Unfortunately, scammers can create fake websites that look like official MHS GENESIS pages. These sites try to trick you into sharing personal or health information.

“Scam websites can look very convincing,” said U.S. Air Force Col. Tara L. Conner, Chief Health Informatics Officer, Health Informatics Division at the Defense Health Agency. “Official MHS GENESIS Patient Portal access always starts through trusted, secure sources and has a URL that ends with .mil. If something doesn’t look right, stop and check before proceeding.”

The Defense Health Agency wants you to know how to spot these scam websites and what to do if you find one.

What are scam MHS GENESIS websites?

Scam websites are fake pages designed to look real. They copy logos, colors, and layouts from official government websites. Their goal is to collect sensitive information, such as:

• Your username or password
• Social Security number
• Date of birth
• Health or insurance details
• Payment or credit card information

Once scammers have this information, they’ll try to steal your personal information.

Signs a website may be fake

According to the Cybersecurity & Infrastructure Security Agency, scammers use fake sites to gain access to your personal information. Before entering any personal information, take a moment to look for signs of a scam. A website may be a scam if it:

• Doesn’t use a .mil address in the URL
• Uses an address that looks unusual or misspelled
• Asks for personal or financial information up front
• Comes from a link in an unexpected email or text message
• Has poor grammar, spelling errors, or odd formatting
• Creates a sense of urgency, such as “act now” or “account suspended” messages

Official MHS GENESIS Patient Portal access begins through trusted government websites. If something feels off, trust your instincts.

How to protect yourself

You can lower your risk by taking a few simple steps:

• Verify the MHS GENESIS Patient Portal URL: https://myaccess.dmdc.osd.mil/identitymanagement/app/login. (Note: You may also see the URLs https://my.mhsgenesis.health.mil or https://patientportal.mhsgenesis.health.mil. These are legitimate. They’ll redirect to the MHS GENESIS login page.)
• Ensure .mil appears in the URL.
• Don’t click links in strange emails or texts.
• Never share your login information with anyone.
• Use strong, unique passwords.
• Keep your device and browser up to date.

If you’re unsure whether a website is legitimate, stop and double check before moving forward.

How to report a suspected scam website

If you think you’ve found a fake MHS GENESIS website or received a suspicious message, report it right away. Reporting helps protect you and other beneficiaries. You can:

• Contact your TRICARE regional contractor.
• Report fraud to DHA or TRICARE.

If you believe your personal information was compromised, act fast. You should:

• Change your passwords.
• File a report with DHA and the Federal Trade Commission.
• Monitor your accounts for strange activity.

Stay informed and stay safe

Online tools make health care easier. They also require caution. Knowing what to look for helps you avoid scams and protect your personal information. When in doubt, stop and verify. You can always ask for help before proceeding.

For more tips on protecting your health information, check out TRICARE’s fraud prevention resources.

Would you like the latest TRICARE news sent to you by email? Visit TRICARE Subscriptions to get benefit updates, news, and more.